diff --git a/modules/lamassu-lnbits.nix b/modules/lamassu-lnbits.nix
index 0c09e66..d2c44c3 100644
--- a/modules/lamassu-lnbits.nix
+++ b/modules/lamassu-lnbits.nix
@@ -194,6 +194,7 @@ in
       lamassu-db-password = {
         user = cfg.user;
         group = "postgres";
+        permissions = "440";  # Allow postgres group to read
       };
     };